PT-2026-104297
CVE-2026-94637
·
تاريخ النشر
2026-10-02
·
تاريخ التحديث
2026-10-09
الوصف من
CVSS 4.0
8.2
عاليةالمقاييسAV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions
Apache Thrift versions prior to 0.25.0
Description
Apache Thrift Go bindings contain an issue involving the improper handling of highly compressed data, which can lead to data amplification. Data amplification occurs when a small amount of input data expands into a significantly larger amount of memory during decompression, potentially leading to resource exhaustion.
Recommendations
Upgrade to version 0.25.0.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾